15c3648544769a5de235884eed5ae2b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c3648544769a5de235884eed5ae2b0_JaffaCakes118
Size

990KB
MD5

15c3648544769a5de235884eed5ae2b0
SHA1

f2c30fc3d05a1bbdfa27c88e250ed089635f7742
SHA256

757a332308f15b4aae54bac428c65215dc42852890aea79e764d846126951d4e
SHA512

cb74d94fb1b4b5e0829acb6ef38413e6467489ff20769027724db2cd5b70ba7869c190e8af6ec816bae307ba1d331164c318c028d2c020809b5ce2965adc7dd1
SSDEEP

12288:30aLKORVTxzlzhWjL7O2AwmPtOWRYcK9/yjtmA7qFEkjOvvmmDgNy5ypkvLLgM2X:30aLKORVTz83OBFOn/ylWGvJVUavYX33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c3648544769a5de235884eed5ae2b0_JaffaCakes118

Files

15c3648544769a5de235884eed5ae2b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE